Lucene search

[email protected]CVE-2022-29383

HistoryMay 13, 2022 - 1:15 p.m.

CVE-2022-29383

2022-05-1313:15:07

CWE-89

[email protected]

web.nvd.nist.gov

netgear

prosafe

ssl vpn

firmware

fvs336gv2

fvs336gv3

sql injection

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.324 Low

EPSS

Percentile

97.1%

JSON

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.

Affected configurations

NVD

Node

netgearssl312_firmwareMatchfvs336gv2

netgearssl312_firmwareMatchfvs336gv3

AND

netgearssl312Match-

CPENameOperatorVersion
netgear:ssl312_firmwarenetgear ssl312 firmwareeqfvs336gv2
netgear:ssl312_firmwarenetgear ssl312 firmwareeqfvs336gv3

CPE	Name	Operator	Version
netgear:ssl312_firmware	netgear ssl312 firmware	eq	fvs336gv2
netgear:ssl312_firmware	netgear ssl312 firmware	eq	fvs336gv3

References

github.com/badboycxcc/Netgear-ssl-vpn-20211222

www.netgear.com/about/security/

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.324 Low

EPSS

Percentile

97.1%

JSON

Related for CVE-2022-29383

prion1 cvelist1 nuclei1 nvd1